This vulnerability in the Custom Fields Account Registration For Woocommerce plugin allows an attacker with some level of privilege to escalate their privileges due to incorrect privilege assignment. The issue affects versions up to 1.2. The CVSS 3.1 vector indicates network attack vector, low attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation could lead to privilege escalation, potentially allowing an attacker to gain higher-level access than intended. This could compromise confidentiality, integrity, and availability of the affected system or data. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin or limiting user privileges where possible to reduce risk.